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Many space-related processes 
are highly complex systems subject 
to sudden, major transients. In 
any complex process control sys- 
tem, a critical aspect is rapid 
analysis of the changing process 
information. During a distur- 
bance, this task can overwhelm 
humans as well as computers. Hu- 
mans deal with this by applying 
heuristics in determining signifi- 
cant information. This paper de- 
scribes a simple, knowledge-based 
approach to prioritizing informa- 
tion. The approach models those 
heuristics that humans would use 
in similar circumstances. 

The approach described in the 
paper has received two patents and 
has been implemented in the Alarm 
Filtering System (AFS) at the Ida- 
ho National Engineering Laboratory 
(INEL). AFS was first developed 
for application in a nuclear reac- 
tor control room. It has since 
been used in chemical processing 
applications, where it has had a 
significant impact on control room 
environments. The approach uses 
knowledge-based heuristics to ana- 
lyze data from process instrumen- 
tation and respond to that data 
according to knowledge encapsulat- 
ed in objects and rules. While 


AFS cannot perform the complete 
diagnosis and control task, it has 
proven to be extremely effective 
at filtering and prioritizing in- 
formation. AFS has been used for 
over two years as a first level of 
analysis for human diagnosticians. 
Given the approach's proven track 
record in a wide variety of prac- 
tical applications, it should be 
useful in both ground- and space- 
based systems. 

INTRODUCTION 

The first section of this paper 
discusses traditional systems and 
processes where alarms and infor- 
mation overload have been a prob- 
lem. Examples of current and fu- 
ture space-related systems with 
similar characteristics are also 
described. The following sections 
discuss how the information over- 
load problem has been addressed in 
the past and what makes the Alarm 
Filtering System approach both 
unique and practical. We then 
provide a detailed description of 
the approach as well as a discus- 
sion of current applications. In 
the final section, we look at how 
the approach might be used today 
and how future diagnostic, manage- 
ment, and control systems might 
use the technology. 


Work supported by the Department of Energy under DOE Contract 
No. DE-AC07-76ID01570. The Department of Energy has been granted patents 
on the approach implemented in the Alarm Filtering System (AFS) and on the 
application of AFS at the Advanced Test Reactor (ATR). 
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THE GENERIC PROBLEM OF INFORMATION 
OVERLOAD 

Today's process and system 
operators are presented with an 
ever increasing number and com- 
plexity of alarms and information 
displays. While operators can 
assimilate this information, 
stress is placed on the operator 
in doing so. This stress can lead 
to mistakes. Pertinent informa- 
tion must be presented in a manner 
that is clear and concise. Unfor- 
tunately, new data acquisition and 
display technologies have exacer- 
bated the problem rather than al- 
leviated it. The tendency has 
been to instrument (and alarm) 
virtually every measurable system 
parameter. The problem is further 
compounded by funnel ing all the 
measurements and alarms into the 
control environment. The belea- 
guered operators are left to ana- 
lyze massive amounts of data. 

This information overload sce- 
nario is common across the entire 
spectrum of process operations and 
control. The many problems inher- 
ent to nuclear power plant control 
rooms are well documented (Banks, 
1981, Christie, 1982, Wahlstrom, 

1983) . The cascading effect of 
one or two causal events in a re- 
actor plant can activate hundreds 
of alarms during the initial five 
seconds of a transient (Felkel, 

1984) . While research had begun 
prior to the Three Mile Island 
(TMI) accident, that event acted 
as a catalyst for a generation of 
work in the area of information 
display and human factors. 

Other industries and types of 
systems suffer from similar prob- 
lems. Telecommunications networks 
can be brought to their knees by a 
single event that propagates 
throughout the system. The dynam- 
ic nature of many chemical pro- 
cesses (oil refineries, off-gas 


and scrubber systems, toxic chemi- 
cal disposal facilities, etc.) 
leaves operators with little time 
and no margin for error. Other 
less dynamic processes can gener- 
ate a steady stream of alarms and 
information that gradually wear an 
operator down. Operators may be 
less alert when a real problem 
arises. 

Space-related systems based on 
the ground, in vehicles and plat- 
forms, and on the lunar surface 
will be extremely dynamic and com- 
plex. The push towards autonomous 
control will leave fewer human 
operators to deal with more prob- 
lems on a larger number of diverse 
systems and processes. These sys- 
tems will range from ground-based 
systems such as launch and commu- 
nications to space systems such as 
propulsion, power, environmental, 
and operational. Indeed, the im- 
portance of recognizing and re- 
sponding to casualties has already 
been recognized for future mis- 
sions and operations. In discuss- 
ing the control of transfer and 
orbital operations, Ramsthaler 
states, "the first line of defense 
against a major failure is ade- 
quate knowledge of the situation 
as it is developing" (Ramsthaler, 
1988). In discussing potential 
problems related to propulsion, 
Ramsthaler makes the point that 
"in order to avoid major damage to 
an engine, action would have to be 
taken within seconds of the fail- 
ure for many of the items." These 
concerns will continue well into 
the future as the same types of 
systems are specifically mentioned 
in proposals for projects that 
would culminate 50 years from to- 
day (West, 1989). 

GENERIC APPROACHES TO SOLVING IN- 
FORMATION OVERLOAD 

One primary goal of data ac- 
quisition and information display 
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is to present the needed informa- 
tion at the appropriate time. An 
effective way of addressing infor- 
mation overload would be during 
the design phase of the system or 
process to be monitored. By prop- 
erly identifying the required in- 
formation, system designers could 
reduce the incoming data to a man- 
ageable amount. Unfortunately, 
one can postulate situations where 
virtually any specific process 
information could be useful. As a 
result, everything is instrument- 
ed, and all of that data is 
brought into the control environ- 
ment. 

Bringing all the data into the 
control environment ensures the 
needed information is always 
available. In fact, it ensures 
that for a given situation a large 
amount of extraneous information 
is also always available. This 
extraneous information overloads 
the operators. Measures must be 
taken to focus operator attention 
on important information as effec- 
tively as possible. Various types 
and levels of information pro- 
cessing have been used for decades 
(Baker, 1985). The functional 
grouping of information and alarms 
is one rudimentary form. With the 
advent of computers and micropro- 
cessor based displays, static pri- 
oritization has become feasible. 
Static prioritization, which is 
widely available in industry to- 
day, allows facilities to assign a 
predetermined priority level to an 
alarm or piece of information. 
That priority remains constant (or 
static) no matter what the situa- 
tion is. Recall the goal of pro- 
viding the needed information at 
the appropriate time. Static pri- 
oritization is a step in that di- 
rection. It does not, however, 
adequately account for the dynamic 
nature of processes and systems. 
When looking at the entire spec- 
trum of process states, a piece of 


information probably does not have 
a single level of importance rela- 
tive to other information from the 
process. Often, that relative 
importance varies from a high lev- 
el to a level of being extraneous. 

The next step in information 
and alarm prioritization has to 
take into account the state of the 
process or system being monitored. 
The Alarm Filtering System (AFS) 
is such a step towards providing 
needed information at the appro- 
priate time. 

AURM FILTERING SYSTEM 

As mentioned earlier, consid- 
erable effort has been made in 
developing operator aids for the 
nuclear power industry. Several 
tools have been proposed or imple- 
mented in such systems as DMA (Di- 
agnosis of Multiple Alarms) (Dan- 
chak, 1982), STAR (Felkel, 1984), 
and DASS (Disturbance Analysis and 
Surveillance System) (Long, 1980). 
These systems addressed the dynam- 
ic nature of processes by using 
logic or cause-consequence trees 
to identify the process state and 
emphasize information accordingly. 
These trees are difficult and ex- 
pensive to build, tend to be in- 
flexible to change, and are not 
easily maintained over the life of 
the plant (Baker, 1985). 

The Alarm Filtering System 
(AFS) was originally developed to 
address the problems caused by on- 
rushes of alarms in nuclear power 
control rooms. We have since ap- 
plied the approach to other pro- 
cesses and to other information 
besides just alarms. We have 
found the approach to be respon- 
sive (in terms of processing in- 
formation), relatively easy to 
develop and maintain, and effec- 
tive in helping to manage the in- 
formation in the control environ- 
ment. 
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AFS determines the importance 
of alarms and information relative 
to its knowledge of the current 
plant state. When process infor- 
mation is provided, AFS assigns a 
level of importance to it. As the 
process subsequently changes and 
other related information becomes 
available, that level of impor- 
tance is reevaluated and possibly 
changed. Thus, the prioritization 
is dynamic, changing as the pro- 
cess changes. Important informa- 
tion is emphasized while, informa- 
tion not pertinent to the current 
situation is deemphasized and, in 
some case, eliminated. AFS uses 
relationships between alarms and 
information as a basis for deter- 
mining importance. These rela- 
tionships and their associated 
rules are used by AFS to: 

• Generate a description of a 
situation implied by combina- 
tions or sequences of informa- 
tion, 

• Suppress information that sim- 
ply confirms or is a direct 
result of a previously des- 
cribed situation, 

• Emphasize information that does 
not correlate with previous 
conclusions or information that 
is expected (due to previous 
conditions) but is not received 
within specified time limits. 
This expected information is 
typically the result of auto- 
matic system response to a pro- 
cess state or operator action. 

The approach used in AFS re- 
sulted from applying expert system 
concepts to the problem. We 
looked at the information process- 
ing problem from the operator's 
view point and modelled the opera- 
tor's methodology for rapidly ana- 
lyzing changing information. We 
recognized that operators use re- 
lationships between pieces of in- 


formation as a basis for determin- 
ing relative importance. Five 
types of relationships were iden- 
tified during the development and 
application of AFS. Each type of 
relationship has a set of possible 
responses and decisions that can 
be made. Thus, each type has a 
set of rules associated with it 
that model how alarms and informa- 
tion should behave and what levels 
of importance should be assigned. 
The five types of relationships 
are level and direct precursors, 
required actions, first-out, and 
blocking conditions. These are 
discussed in greater detail in the 
descriptions of the two patents on 
the approach (Corsberg, 1988, 
1989). There is nothing particu- 
larly complex about these rela- 
tionships. It is their practical 
application to process information 
management that produces effective 
results. The level precursor re- 
lationship is an excellent exam- 
ple. This relationship typically 
occurs when the same parameter has 
two alarm setpoints. Thus, alarm 
A's setpoint would be at one level 
(a lower reading), while alarm B's 
setpoint would be at another 
(higher) reading. Alarm A should 
always be activated before B. If 
both are activated, then B should 
deactivate prior to A. In terms 
of prioritization, if both A and B 
are activated, B should be at a 
higher level of priority than A. 
If only A is activated, it should 
be emphasized at the highest level 
(unless another related piece of 
information affects its priority). 
As mentioned above, these priori- 
ties are dynamic. Thus, if both A 
and B were activated, and B is 
then deactivated, A's priority 
would be updated based on the new 
set of information. 

The use of objects and their 
associated mechanisms has been of 
particular importance in the suc- 
cessful development of AFS. AFS 
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uses information about the pro- 
cesses and systems being monitored 
as well as parameters and other 
types of information. Each of 
these entity types is represented 
by a class that acts as a blue- 
print for building specific ob- 
jects. All objects in a class 
will have the same structure be- 
cause they were all built from 
that same blueprint. Each specif- 
ic object in a class has a differ- 
ent information content based on 
the entity it represents (rather 
than on the type of entity). 

In addition to providing str- 
ucture for objects, classes also 
associate functionality with the 
objects. This functional ity takes 
the form of programming procedures 
that are invoked when objects send 
messages to each other. These 
procedures are common to all ob- 
jects in a particular class. The 
rules concerning behavior and pri- 
ority levels are encapsulated in 
these procedures. The ability to 
associate a procedure with an en- 
tire class of objects has greatly 
increased the modularity of AFS 
and reduced the total number of 
rules required. Specific data 
about each piece of information is 
contained in the object represent- 
ing that piece of information. 
The more general knowledge about 
responses and actions caused by 
the relationships is contained in 
the procedures. This separation 
of knowledge provides the modular- 
ity to make AFS flexible. During 
the development of an implementa- 
tion, developers can focus on the 
process and its parameters rather 
than on the more generic portions 
of the approach. Changes can be 
made with minimal impact on nonre- 
lated portions of the implementa- 
tion. 


AFS APPLICATION AND KNOWLEDGE AC- 
QUISITION 

AFS has been installed in nu- 
clear reactor control room simula- 
tor and in the control room of a 
chemical processing facility. Two 
important issues in the applica- 
tion process are the information 
displays and the knowledge acqui- 
sition process. As the reader may 
have noted already, this paper has 
not mentioned information dis- 
plays. One reason is that AFS is 
relatively independent of these 
displays. AFS acts as an in-line 
processor between the instrumenta- 
tion and the information displays 
in the control environment. AFS 
simply assigns a priority to each 
piece of information. What is 
done in response to that priority 
is entirely up to the specific 
facility (and, possibly, even a 
specific operator). AFS has been 
used in facilities where the asso- 
ciated display is a graphical mim- 
ic of the process. The same AFS 
approach has been used in conjunc- 
tion with simple scrolling text 
windows where the AFS-assigned 
priorities were used to determine 
what to scroll off the window and 
what to leave on. This modularity 
allows AFS to be integrated into 
any environment that has an open 
architecture. 

When discussing AFS, the most 
common and immediate question is 
about how the relationships be- 
tween the information are deter- 
mined. The relationships are de- 
fined through the process of 
knowledge engineering, a disci- 
pline that has grown out of expert 
systems and artificial intelli- 
gence. We start by clearly defin- 
ing the information and alarms to 
be processed. (This turns out to 
be a difficult task in itself.) 
We use engineering, training, and 
operational documentation as a way 
of becoming familiar with the pro- 
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cess and its terminology. We then 
go through an exhaustive and iter- 
ative process of identifying and 
justifying relationships between 
information and alarms. This pro- 
cess of extracting the knowledge, 
putting it to paper, and then re- 
fining it had little to do with 
computers. In fact, the close ex- 
amination of data acquisition and 
alarm systems revealed several 
items and assumptions that were 
incorrect. 

During the design of a facil- 
ity, engineers will anticipate 
some of the information problems 
and will effectively tune them 
out. However, not everything can 
be predicted, and there are always 
extraneous, spurious bursts of in- 
formation that are generated once 
a process or system begins opera- 
tion. All AFS applications have 
had significant operating experi- 
ence to draw on. This experien- 
tial knowledge has been the foun- 
dation of the knowledge bases in 
these applications. Many poten- 
tial AFS space applications would 
not necessarily have this experi- 
ential knowledge to draw on. Po- 
tential areas to acquire this 
knowledge from include training 
facilities and simulators. The 
fact that AFS can be changed easi- 
ly would also allow for modifica- 
tion once systems have been de- 
ployed. These changes could be 
effected remotely since AFS is 
implemented entirely in software. 

AFS has proven to be an effec- 
tive aid to operators. It adds 
minimal time to transmitting pro- 
cess information to the control 
environment. Versions implemented 
in the programming language LISP 
add between 10 and 20 milliseconds 
to the total time response. As 
implementations in more tradition- 
al programming languages such as C 
come online, these times will be 
further reduced. One application 


has been used for nearly three 
years without a single failure. 
That application has reduced mes- 
sage traffic by more than 80%. 

AFS AND SPACE 

AFS is a step towards more 
effective management of process 
information. It is not a stand- 
alone system. AFS applications 
must be developed and integrated 
into a total environment of infor- 
mation acquisition, processing, 
and display. Many potential 
space-related applications could 
be developed today. These include 
ground-based launch, control, and 
communication systems where infor- 
mation management problems have 
been identified. In these cases, 
AFS could be used to directly in- 
fluence the information being dis- 
played to operations personnel. 

Future applications would prob- 
ably use the AFS approach in a 
different way. AFS uses experien- 
tial knowledge and has no real in- 
depth understanding of the systems 
and processes being monitored. As 
more sophisticated diagnostic and 
control systems are developed, 
AFS's role would change from that 
of providing more effective infor- 
mation to humans. Instead, AFS 
would act as a front-end to auto- 
mated software with complicated 
models and knowledge bases. The 
knowledge used in AFS is a highly 
effective way of rapidly identify- 
ing a situation and can be envi- 
sioned as handling a high percent- 
age of information management pro- 
blems. To handle more difficult 
problems, AFS applications would 
need to be incorporated into a 
much larger environment of cooper- 
ating knowledge-based systems. 
These other systems would handle 
the more complex and computation- 
ally intensive tasks of diagnosis 
and control. AFS applications 
would still provide the needed in- 
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formation at the appropriate time. 
Rather than providing that infor- 
mation to humans, AFS would be 
working with other software sys- 
tems, improving their quality and 
effectiveness. 

CONCLUSION 

This paper has described a 
knowledge based approach to prior- 
itizing process information. This 
approach, AFS, has been developed 
and successfully used in nonspace 
applications. AFS has proven to 
be an effective step towards solv- 
ing many real-time information 
management problems in control 
rooms. These same problems exist, 
or will exist, in the control en- 
vironments of current and future 
space-related systems. As such, 
AFS should be generally applicable 
to a wide variety of space appli- 
cations. 
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